Which statement is correct regarding the group configuration on the current key server for group 1?

You have an existing group VPN established in your internal network using the group-id 1. You
have been asked to configure a second group using the group-id 2. You must ensure that the key
server for group 1 participates in group 2 but is not the key server for that group. Which statement
is correct regarding the group configuration on the current key server for group 1?

A.
You must configure both groups at the [edit security ipsec vpn] hierarchy.

B.
You must configure both groups at the [edit security group-vpn member] hierarchy.

C.
You must configure both groups at the [edit security ike] hierarchy.

D.
You must configure both groups at the [edit security group-vpn] hierarchy.

Explanation:

Reference: http://www.jnpr.net/techpubs/en_US/junos11.4/information-products/topiccollections/security/software-all/security/index.html?topic-45791.html